Privacy Policy
Privacy Policy
Firma Marcin Narowski
ul. Lipowa 18, 56-200 Góra, Poland
VAT/NIP: 8881558981
E-mail: dev@sakurato.tech
1. Scope and Purpose
This Privacy Policy describes how Firma Marcin Narowski ("we", "us", or "Controller") collects, uses, and protects personal data in connection with the sakurato.tech website and the Sakurato Crypto Portfolio Tracker WordPress plugin. This Policy complies with the General Data Protection Regulation (EU) 2016/679 (GDPR).
2. Data We Collect and Why
| Source | Data Collected | Purpose | Legal Basis (GDPR) |
|---|---|---|---|
| Contact form | Email address, name (optional), message content | Responding to your inquiry | Art. 6(1)(b) — pre-contractual steps |
| Newsletter form | Email address | Sending plugin updates and news | Art. 6(1)(a) — consent |
| Premium purchase (Freemius) | Email address, site domain, payment data (processed by Freemius/Stripe) | Order fulfillment, license management | Art. 6(1)(b) — performance of contract |
3. Your Plugin Data Stays on Your Server
The Sakurato Crypto Portfolio Tracker plugin runs entirely on your own WordPress installation. All portfolio data — transactions, balances, history — is stored exclusively in your WordPress database. We (sakurato.tech) have no access to this data and do not process it in any way.
4. Third-Party Services and Data Flows
| Service | What Is Sent | What Is NOT Sent | Privacy Policy |
|---|---|---|---|
| CoinGecko API | Coin identifiers only (e.g. "bitcoin", "ethereum") to retrieve live prices | User data, balances, transaction amounts, personal information | coingecko.com/en/privacy |
| Freemius (Premium only) | Buyer's email address and site domain — to validate the license upon Premium activation | Portfolio data, transactions, visitor data | freemius.com/privacy |
The Free version downloaded from WordPress.org does not transmit any data to Freemius.
5. Cookies
The sakurato.tech website uses the following cookies:
- Technical (WordPress): essential for site operation (session, login); do not require consent.
- Newsletter form: session cookie for form processing; no analytics data collected.
The plugin installed on your site does not set any cookies for your site's visitors.
6. Data Retention
| Data Category | Retention Period |
|---|---|
| Contact form data | 12 months from last contact, unless a longer period is required by the nature of the matter |
| Newsletter subscriber data | Until consent is withdrawn (unsubscribe) |
| Premium purchase data (Freemius) | 5 years from the end of the tax year of purchase (statutory accounting obligation) |
7. International Transfers
Freemius Inc. is a US-based company. Data transfers are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of protection in accordance with GDPR.
8. Your Rights
Under GDPR, you have the following rights:
- Right of access — request information about what data we hold about you.
- Right to rectification — request correction of inaccurate data.
- Right to erasure — request deletion of your data ("right to be forgotten").
- Right to restriction — request restriction of processing in certain circumstances.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests.
- Right to withdraw consent — withdraw consent at any time (e.g. newsletter unsubscribe) without affecting prior processing.
To exercise any of these rights, contact us at: dev@sakurato.tech. We will respond within 30 days.
9. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl. You may also contact the supervisory authority in your country of residence.
10. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction, in compliance with GDPR requirements.
11. Changes to This Policy
We reserve the right to update this Privacy Policy. We will notify you of significant changes by updating the date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated Policy.
